---
- name: Upgrade all packages
  ansible.builtin.apt:
    upgrade: dist
    autoremove: yes
    autoclean: yes
  when: ansible_os_family == "Debian"
  register: system_upgraded

- name: Install security packages
  ansible.builtin.apt:
    name: "{{ security_packages }}"
    state: present
  when: ansible_os_family == "Debian"